Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F6034/EA17670490FC11EA8C4F5B6EF8AEA228/5zU0-ODMucOEExGNd_3qToCP6jE.mft
File:                     5zU0-ODMucOEExGNd_3qToCP6jE.mft (raw, json)
Hash identifier:          6mqzC7G8iEJODUlJgDsSGZk7tvjidq+9JVbcZ3iaLkI=
Subject key identifier:   B2:A4:D4:1E:6D:2C:8B:42:4C:93:6D:85:21:EF:57:4A:68:4E:9A:7C
Authority key identifier: E7:35:34:F8:E0:CC:B9:C3:84:13:11:8D:77:FD:EA:4E:80:8F:EA:31
Certificate issuer:       /CN=F36F6034AR/serialNumber=E73534F8E0CCB9C38413118D77FDEA4E808FEA31
Certificate serial:       08A6
Authority info access:    rsync://rpki.afrinic.net/repository/arin/5zU0-ODMucOEExGNd_3qToCP6jE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F6034/EA17670490FC11EA8C4F5B6EF8AEA228/5zU0-ODMucOEExGNd_3qToCP6jE.mft
Manifest number:          08A5
Signing time:             Wed 25 Mar 2026 02:00:00 +0000
Manifest this update:     Wed 25 Mar 2026 02:00:00 +0000
Manifest next update:     Fri 27 Mar 2026 02:00:00 +0000
Files and hashes:         1: 5zU0-ODMucOEExGNd_3qToCP6jE.crl (hash: va7yMvZX1B2Wn4Zdlk/E4L4gu7BtooqqGfSq7OvB7/U=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F6034/EA17670490FC11EA8C4F5B6EF8AEA228/5zU0-ODMucOEExGNd_3qToCP6jE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F6034/EA17670490FC11EA8C4F5B6EF8AEA228/5zU0-ODMucOEExGNd_3qToCP6jE.mft
                          rsync://rpki.afrinic.net/repository/arin/5zU0-ODMucOEExGNd_3qToCP6jE.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 27 Mar 2026 01:59:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2214 (0x8a6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F6034AR, serialNumber=E73534F8E0CCB9C38413118D77FDEA4E808FEA31
        Validity
            Not Before: Mar 25 02:00:00 2026 GMT
            Not After : Mar 27 02:00:00 2026 GMT
        Subject: CN=69c341a0-c6c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:2d:8b:6c:38:6a:9f:c3:14:78:cc:d8:b0:9d:
                    a0:d4:58:46:ed:ca:58:2f:c6:45:76:ed:85:8a:33:
                    fe:9d:c2:d7:88:a4:2a:09:ce:84:cd:fe:a3:51:a2:
                    a2:bc:4d:6d:37:9c:ba:bb:84:82:75:8d:80:b8:e4:
                    9e:cf:07:6c:38:23:14:82:cd:9d:d2:42:c2:a9:f7:
                    cc:ec:90:75:4f:2b:e0:33:0a:aa:fd:f6:bb:19:86:
                    74:8e:8a:4a:32:29:1e:ff:b0:f4:f9:51:73:a3:4c:
                    96:9f:9f:9d:6a:04:f3:6a:52:67:0e:fd:80:c8:ea:
                    e4:81:78:96:72:5b:45:27:f3:5e:7c:b3:56:ba:b5:
                    04:aa:69:ae:7d:5e:87:28:d2:2e:2b:10:b3:13:7d:
                    a0:db:66:89:89:42:01:48:10:fa:4c:3e:ee:c2:84:
                    7f:f9:27:47:70:84:32:de:3d:6b:05:08:d0:67:0f:
                    7e:09:56:25:7e:27:10:c8:af:f1:5a:b8:4c:16:b8:
                    e0:34:cf:e1:34:e9:ef:f7:f1:ef:1b:07:8c:b9:4b:
                    b1:e7:16:e3:2d:7b:89:09:28:6f:d2:53:65:ae:b8:
                    2a:dc:6a:36:83:2e:67:52:00:f1:71:46:cc:dc:95:
                    89:0d:9f:69:91:ae:1a:82:cd:dd:3f:4e:09:56:91:
                    c4:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:A4:D4:1E:6D:2C:8B:42:4C:93:6D:85:21:EF:57:4A:68:4E:9A:7C
            X509v3 Authority Key Identifier:
                keyid:E7:35:34:F8:E0:CC:B9:C3:84:13:11:8D:77:FD:EA:4E:80:8F:EA:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F6034/EA17670490FC11EA8C4F5B6EF8AEA228/5zU0-ODMucOEExGNd_3qToCP6jE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/5zU0-ODMucOEExGNd_3qToCP6jE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F6034/EA17670490FC11EA8C4F5B6EF8AEA228/5zU0-ODMucOEExGNd_3qToCP6jE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:65:3d:ce:9a:80:f4:98:a3:dd:c2:c1:f4:16:b8:f7:35:10:
         e4:7a:02:ba:2b:91:1a:44:d7:47:1d:89:6b:a1:eb:17:be:75:
         de:12:43:4a:13:5a:f7:3b:08:84:d8:3d:a8:73:67:78:82:00:
         a2:28:6e:32:5c:14:7b:5a:8f:7f:96:32:4b:29:51:3a:8c:8d:
         95:78:84:e7:83:60:63:92:80:91:48:c8:24:63:4c:50:15:d2:
         8f:87:5f:0e:e1:28:70:44:25:7f:41:76:01:d3:2e:96:a7:7d:
         04:68:fa:c5:03:b4:88:14:7c:1d:9c:70:02:44:9a:64:b9:68:
         ce:d7:d9:29:25:a8:39:96:e1:5b:85:c5:32:58:2a:ee:08:7f:
         58:9e:64:a3:3b:07:11:1f:97:9d:94:3d:d9:1b:70:eb:1d:54:
         54:13:fb:3b:db:66:47:59:47:f7:77:e2:f5:6f:5f:b5:25:f2:
         b4:15:d4:1d:65:61:05:7c:12:88:5b:80:6a:f3:8e:66:54:4c:
         90:6b:af:95:6f:06:a5:19:06:a4:15:e6:03:e1:cc:37:55:08:
         12:08:ee:36:ac:fd:6b:67:2a:27:eb:a8:15:2d:5a:d9:d6:72:
         db:86:82:b3:0a:50:59:25:ed:9b:92:78:8c:31:b2:a6:ca:e0:
         5c:23:40:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:43:24 2026 by rpki-client